a1timecapsule.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4b:b8:04:37:e9:9c:66:a7:fd:85:9f:08:4f:57:a6:f7:92 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=a1timecapsule.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4b:b8:04:37:e9:9c:66:a7:fd:85:9f:08:4f:57:a6:f7:92
Serial Number (int): 287102635168804077191492660498893424228242
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5e:98:52:a7:0c:84:8b:8c:f6:5c:d9:90:16:4c:08:64:05:c2:4f:60
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fa:61:5e:64:50:d2:d1:df:3f:a0:ef:56:b3:bc:11:81:f1:bc:d9:21
Fingerprint (sha256): 17:5a:96:19:d4:f8:8e:c0:b5:11:02:17:a0:d0:2b:1e:5b:c5:5e:ac:29:25:f0:84:f3:bd:02:76:11:e7:67:fb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate a1timecapsule.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for a1timecapsule.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.a1timecapsule.com
*.afdatv.com
*.americasgotalent.com
*.animalx.com
*.autodium.com
*.bamboopentablet.com
*.beststorageideas.com
*.biggestdata.com
*.clinicadentalalcira.com
*.cmazon.com
*.copme.com
*.cursoatendimentocliente.com
*.ecigardepot.com
*.enfis.com
*.erro.com
*.fabricafantasia.com
*.flexiviajes.com
*.foldingsportwagons.com
*.gclouds.com
*.grooveeshark.com
*.haldiramonline.com
*.hermandadmexicana.com
*.hirollersbarbershop.com
*.kungfuwin.com
*.lasvegasdinettesandstools.com
*.locovegan.com
*.macaobookmakers.com
*.mdlotteryresultes.com
*.myusfoods.com
*.nbascore.com
*.niponlifebenefits.com
*.nysstateofhealth.com
*.oasischevrolet.com
*.ontariocaairporthotelcc.com
*.paulmforcouncil.com
*.paychekflex.com
*.poetryfasion.com
*.ramonasentinal.com
*.sanjivani.com
*.shoppingkicks.com
*.tddress.com
*.thespaatmcclellanpark.com
*.totalsportteck.com
*.umtuckit.com
*.usasportscards.com
*.wedgwoodscience.com
*.westqualityfoods.com
*.wordwithfriendscheat.com
*.wwwmensfitness.com
*.wwwtoptiergas.com
a1timecapsule.com
afdatv.com
americasgotalent.com
animalx.com
autodium.com
bamboopentablet.com
beststorageideas.com
biggestdata.com
clinicadentalalcira.com
cmazon.com
copme.com
cursoatendimentocliente.com
ecigardepot.com
enfis.com
erro.com
fabricafantasia.com
flexiviajes.com
foldingsportwagons.com
gclouds.com
grooveeshark.com
haldiramonline.com
hermandadmexicana.com
hirollersbarbershop.com
kungfuwin.com
lasvegasdinettesandstools.com
locovegan.com
macaobookmakers.com
mdlotteryresultes.com
myusfoods.com
nbascore.com
niponlifebenefits.com
nysstateofhealth.com
oasischevrolet.com
ontariocaairporthotelcc.com
paulmforcouncil.com
paychekflex.com
poetryfasion.com
ramonasentinal.com
sanjivani.com
shoppingkicks.com
tddress.com
thespaatmcclellanpark.com
totalsportteck.com
umtuckit.com
usasportscards.com
wedgwoodscience.com
westqualityfoods.com
wordwithfriendscheat.com
wwwmensfitness.com
wwwtoptiergas.com

Other certificates including the domain name a1timecapsule.com

(limited to 100 certificates)
dumpanimage.com
a1timecapsule.com
bigzpizzeria.com
onmnicard.com

Certificate

The complete raw certificate details for a1timecapsule.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287102635168804077191492660498893424228242
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-22 18:38:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-21 18:38:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'a1timecapsule.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 919492923807916081417508450775344377625038766510555296932181462359594000579087567603331195628308177989892773119674392361558517026225700691499928482934945834207056316947320461488129506892794089774622311058175763235290480985742841044690463480272168952429221129158762715812317041781207436069369358794923721762896795512733325559896699654564108122989634681973181986814148301927297267228854155377751951502002326786810716323107374341682341191209525874578504421058899964923131808692467939190526106608331109233590381387550487386758464329999889208699639075447960009599640983739322018884830408765627809086129444843559120241013064449122720482719781091098941245054752108828015168836663741993834745065779138203086132903353603511991387709035208749422861882308146106434737568335864131905383793726324351501704688209812383624842551048622926733471095594519081007830406831963922665416708574617363882937943564844087090342881166201463604127354837615012127218695893771947049421502022929345238864793003053803731121937097338087480825777722902007646305564652875029487707667347206414437451169014213464826159372591540617490185552384671183409427342344991314447921365492162161066594168592442865743435652910193896138667681690064121922305945979928255114332251823863
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5e9852a70c848b8cf65cd990164c086405c24f60
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2016 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a1timecapsule.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afdatv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.americasgotalent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.animalx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autodium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bamboopentablet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beststorageideas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biggestdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clinicadentalalcira.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cmazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.copme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cursoatendimentocliente.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecigardepot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enfis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fabricafantasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flexiviajes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foldingsportwagons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gclouds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grooveeshark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haldiramonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hermandadmexicana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hirollersbarbershop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kungfuwin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lasvegasdinettesandstools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.locovegan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.macaobookmakers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mdlotteryresultes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myusfoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nbascore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.niponlifebenefits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nysstateofhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oasischevrolet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ontariocaairporthotelcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paulmforcouncil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paychekflex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poetryfasion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ramonasentinal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sanjivani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoppingkicks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tddress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thespaatmcclellanpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.totalsportteck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.umtuckit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usasportscards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wedgwoodscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westqualityfoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wordwithfriendscheat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwmensfitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwtoptiergas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a1timecapsule.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afdatv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americasgotalent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'animalx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bamboopentablet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beststorageideas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biggestdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinicadentalalcira.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'copme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cursoatendimentocliente.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecigardepot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enfis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabricafantasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flexiviajes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foldingsportwagons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gclouds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grooveeshark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haldiramonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hermandadmexicana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hirollersbarbershop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kungfuwin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lasvegasdinettesandstools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locovegan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macaobookmakers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdlotteryresultes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myusfoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbascore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niponlifebenefits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nysstateofhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oasischevrolet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ontariocaairporthotelcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paulmforcouncil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paychekflex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poetryfasion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ramonasentinal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanjivani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoppingkicks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tddress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thespaatmcclellanpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totalsportteck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umtuckit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usasportscards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wedgwoodscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westqualityfoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wordwithfriendscheat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwmensfitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwtoptiergas.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a468ee1130000040300483046022100bcb1e2a03f40c8105eb0c118e81ff5e30c90dfc724e29aca5709b564480380a8022100e1fe67a226be3a6e4274df16feca6da9cd0bd00d677725b19500c7584f4ee65e007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a468edf91000004030046304402206fd3c1134b307e724353f9bc0a2d447129993ffe5b938049fa9bd4b612f3e11a022015e132d4abba2433c604c3ebaf5df6b66743d4de38603e79d9bd2a22cb0fc8ad
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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